Skip to content
English
Back to Setyl Website
  • There are no suggestions because the search field is empty.

Google Workspace integration guide

Connecting Google Workspace keeps Setyl's people list up to date automatically. It can also import your organization structure and discover the apps your team signs into with their Google work accounts.

What Setyl syncs

  • People: name, email, job title, profile photo and other user information.

  • Organization structure (optional): locations, departments, legal entities and more, built from user profiles and org units.

  • Apps: apps and services employees sign in to with their Google work account.

Before you start: who can connect it?

You need to be a super administrator of your Google Workspace. A quick check is whether you can open admin.google.com, though some organizations restrict access further.

If you're not a super admin:

  1. In Setyl, click + > Add Person and add someone who is.

  2. Set their role to Owner.

  3. They can then sign in to Setyl with Google and connect the integration.

How to connect Google Workspace

  1. Go to Settings > Integrations.

  2. Under Core Integrations, find Google Workspace and click Connect.

  3. Sign in with Google and approve access on behalf of your organization.

  4. On the mapping screen, choose which information to sync into Setyl.

  5. Finish the setup. The sync then runs in the background.

Keep it connected. The integration only works while it stays connected. The person who connected it should keep their Setyl access in case it ever needs reconnecting.

What happens after you connect

Setyl stays in sync through real-time updates and regular syncs:

  • New users in Google Workspace are added to Setyl with an Onboarding status.

  • Profile changes, such as job title or photo, are synced.

  • Removed or suspended users move to Offboarding, unless they're already archived. You can change these defaults under Settings > Company Settings > General.

  • New apps that someone signs into with Google are detected in Setyl.

If someone was suspended by mistake, see Reactivating or unsuspending a user in Google or Microsoft.

Fixing "Access blocked" or "app blocked" errors when connecting

If you see an error saying Setyl is blocked, your Google Workspace has an admin policy stopping it. Setyl asks for directory and user data, which Google classes as sensitive, and many organizations block unconfigured third-party apps from that by default. Nothing is wrong with Setyl or its Marketplace listing.

A Google Workspace super admin needs to mark Setyl as trusted:

  1. Go to admin.google.com > Security > Access and data control > API controls.

  2. Click Manage Third-Party App Access, then Configure new app.

  3. Search for Setyl. If it doesn't appear, search for its client ID: 34102697629-5l50vher4ldl3ec9c9grgvgbkefrqoa9.apps.googleusercontent.com

  4. Choose who it applies to: your whole organization or specific organizational units.

  5. Set access to Trusted and save.

  6. Try connecting again. The change can take a few minutes, and occasionally up to an hour, to take effect.

Also check Apps > Google Workspace Marketplace apps > Settings. If only allowlisted apps are allowed, add Setyl to the allowlist.

If you're not a super admin, send these steps to someone who is. Other users can't override the block.

Other Google connections

  • Google Workspace (License Intelligence): syncs all your Google Workspace licenses, with total and assigned seats. You'll find it under License Intelligence Connections.

  • Google Endpoint Management: brings device and MDM information from Google into Setyl. You'll find it under Asset Detection Sources. It asks for permission to see your device details (cloud-identity.devices.lookup and cloud-identity.devices.readonly).

Permissions Setyl requests

When you connect Google Workspace, Setyl asks for these permissions:

  • See info about users on your domain (admin.directory.user.readonly)

  • Manage data access permissions for users on your domain (admin.directory.user.security)

  • View groups on your domain (admin.directory.group.readonly)

  • View organization units on your domain (admin.directory.orgunit.readonly)

  • View customer related information (admin.directory.customer.readonly)

  • See your primary Google Account email address (userinfo.email)

License Intelligence also asks for:

  • View and manage Google Workspace licenses for your domain (apps.licensing)

  • View usage reports for your Google Workspace domain (admin.reports.usage.readonly)

Sign in with Google: the first time each person signs in to Setyl with Google, Google also asks them to share their personal info (userinfo.profile) and to associate them with it (openid).

You can also find Setyl in the Google Workspace Marketplace.